Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 16:41:01 +0000 EUVD-2026-267732 https://cve.radiocsirt.org/vuln/euvd-2026-267732 EUVD-2026-267732 https://cve.radiocsirt.org/vuln/euvd-2026-267732 fkie_cve-2025-69970 https://cve.radiocsirt.org/vuln/fkie_cve-2025-69970 <p>FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js. The &#39;secureEnabled&#39; flag is commented out by default, causing the application to initialize with authentication disabled. This allows unauthenticated remote attackers to access sensitive API endpoints, modify projects, and control industrial equipment immediately after installation.</p> <p>FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js. The &#39;secureEnabled&#39; flag is commented out by default, causing the application to initialize with authentication disabled. This allows unauthenticated remote attackers to access sensitive API endpoints, modify projects, and control industrial equipment immediately after installation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-69970 GHSA-r5m2-fqcf-qrf7 — FUXA contains an insecure default configuration vulnerability https://cve.radiocsirt.org/vuln/ghsa-r5m2-fqcf-qrf7 <p><strong>Affected:</strong> npm: fuxa-server</p> <p>FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js. The &#39;secureEnabled&#39; flag is commented out by default, causing the application to initialize with authentication disabled. This allows unauthenticated remote attackers to access sensitive API endpoints, modify projects, and control industrial equipment immediately after installation.</p> <p><strong>Affected:</strong> npm: fuxa-server</p> <p>FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js. The &#39;secureEnabled&#39; flag is commented out by default, causing the application to initialize with authentication disabled. This allows unauthenticated remote attackers to access sensitive API endpoints, modify projects, and control industrial equipment immediately after installation.</p> https://cve.radiocsirt.org/vuln/ghsa-r5m2-fqcf-qrf7